def add_header(response):
    """Add CORS and Cache-Control headers to the response."""
    if not response.cache_control:
        response.cache_control.max_age = 30
    response.headers['Access-Control-Allow-Origin'] = '*'
    response.headers['Access-Control-Allow-Methods'] = 'GET'
    return response