We've already made the CORS changes in our copy of favcount, but we should bump the version to match upstream.
too: https://github.com/chrishunt/favcount/pull/8