added CORS header to mock psgi