Include scheme in CORS header