added CORS accept headers