Add CORS header for claim puts and deletes