Allow CORS requests.