Added CORS headers.