Enable CORS on static requests