Add simple CORS support to Response