CORS update on documents.json endpoint.