Set CORS fixing headers on get/set location