Add Access-Control headers to the response if coming from the cache
  - Match what would be returned by the server