Fix careless bug with CORS X_HEADERS response..