CORS for fonts on AWS S3