CORS and JSON accept header on get.