Made access-control-allow-origin more realistic.