Updates CORS issue.

Add Authorization to be allowed in request header.