Adding CORS header.