Add Cross-Origin Resource Sharing header to all requests