send headers to enable CORS to specific method