Added CORS header in response