Added access-control-allow-origin to all static requests