no body for redirects

add cross origin header