Added headers in CORS