Use CORS and return Boom errors in browser.
Updated docs.