Fix Cross Origin Headers in REST API