Add another header to fix Chrome CORS requirement