Add additional CORS Header