Added CORS response header.