dont set custom header on cross origin require