Add and expand more "Access-Control-Allow-*" headers.