Add cross-site request permission to server.