adding cross origin headers to even the other endpoints