Allow CORS Final-Length header