Added a cors_policy to the /oil link.