Add CORS headers to arrays