Adding CORS response header for Referer request header