Allow CORS response to reflect request parameters