Add CORS in POST response