Add CORS support for GET