[fix] Added cors header for cross-domaining.