Testing CORS headers.