send back singleCorsHeader is set