Added CORS header for cross-domain script support.