Adds CORS headers for assets