Added access-control-allow-origin default header.