Add cross-origin headers.