[fix] Also apply CORS headers to our client file.