Revert "Removed CORS headers"

This reverts commit 8e5f9f8acff87b864af8c6756bf4f009a4dd3fab.