fix(https): Ensure twitter profiles are returned as secure url
fix(https): Expose X-Page and X-PageTotal headers when using CORS