GPII-217: added CORS middleware to support cross domain requests.