set CORS header response for ArchMap