Minor cleanups.
Enables CORS, intrucing one more dependency (see notes).