Subclassed piston resource to allow CORS.