Add in access control header