set cors header for tile authproxy request