Set CORS and caching headers on admin site.