Add CORS header so that swagger resources are available across domains