Enable CORS for our own subdomains.