Moved cross domain header injection into one global route