Add header for CORS so that swagger resources are available across domains.