Changes http header to support CORS