Pull in the CORS support to the latest asset_sync (in my own fork to control updates).