added HTTP response headers for CORS