Add more CORS header stuff