removed Vary: Origin header