Adds headers for CORS requests