Send CORS headers on auth fail