Server: Added CORS allowance to response headers.
Server: Don't tell the app flagFrageValidiert (unnecessary).