Allow X-origin.