Added response headers to support CORS