Added auth request header for CORS.