Add response headers to enable cross-origin resource sharing (CORS)