add cache-control, access-control-allow-origin, and vary headers to match all other js file headers