Expose Content-Type and ETag via CORS.