Allow CORS on fonts.