fixed cors headers

BUG=

Review URL: https://chromiumcodereview.appspot.com/229383002