Setup CORS support for the API controllers.