Removed CORS header.