Add permissive access control header.