Serve assets with cross-origin allowed