Added Access-Control-Allow-Origin

SD-122 : add Access-Control-Allow-Origin header to 401 responses

Fixed