Return response for CORS headers