Implement CORS for upload endpoints.

SDUX-38