Add Access-Control-Max-Age with default value of 24hr