Adds headers to allow CORS