Tweak CORS headers.