Use django-cors-headers instead of NIH.