Add CORS headrs to set-cookie response