Add basic CORS filter.