Avoid possibility of sending duplicate access-control-allow-origin.