In order to make it possible to have images download directly instead of the browser opening them in a tab, the images that we store in Google Cloud Storage need to have the following response header:

Access-Control-Allow-Origin: *

This is safe to do as these images are publicly available anyway. It might also help address other CORS issues we might have.