Checkpoint: Add some headers for CORS