Allow cross-domain access to headers.