add access control header for error responses