Adding CORS headers to /menu.