Add CORS support so clients can POST to casti from other domains.