Add access-controll headers to allow cross-domain access to the connect url