Add json content type, cache control, and CORS headers