Add CORS headers to feed and api responses