Add header to allow cors requests from TLE domains