improves dummy server CORS headers