Allow CORS. Fixes issue #3.