changes for web portal
include cross origin header for getfileref error responses