Add `crossOrigin: true` for Reqwest to work with CORS

I assume it's fine always to send it even when not over CORS?