Added simple CORS header to responses