Added cors header to requirement