implementing CORS for S3 buckets of pkpasses