Enable CORS headers in server response for playManifestAction

SUP-1257 #time 10m