Fix CORS for any incoming request.