CORS and Socket.IO are configured to allow all origins.