Add what I presume to be acceptable CORS headers.