Adding allow origin header through middleware.
More custom headers to make cross-origin work.