Adding cors-header in requires