Allow the If-Match header via CORS.