CORS-Headers and unauthorized OPTIONS for compatibility with ADL
XAPIWrapper