Fix pass through Access-Control-Allow-* headers