adding missing headers to cors