CORS all /meta/ queries

Change-Id: Ia15c7250df709d55f672bfc0c191d85eeaaf3ae7