fix for local cases again

I should probably write tests for this one line of code :(
allow reading Link headers in CORS