Re #1477 Adding Access-Control-xxxx HTTP headers to all relevant API calls' response.