Add CORS for API
Remove server version header.
Remove "Powered By" header.