Allow opening to all CORS requests.