Enable CORS in the WebApi configuration because I couldn't get it to work through IIS alone.