Add CORS to tile requests