Add access control header.