Refine patching response headers for CORS support