Allows CORS for Node HTTP in the most permissive way.