Fix CORS handling.

Also add a new dependency for feed parsing.