citation service cors headers