Add CORS headers for receving cookies