Add some cors headers