Add Cache-Control to CORS