added support for CORS-related response headers