Add CORS headers

Change-Id: Ia6f376f7b940947e3e40c1f26b91a56cd3f3ad36