Enable CORS headers from assets on staging