Add vary header to all Json files

Not just CORs

cc @phamann