Allowing CORS on server.