Fix allow-origin header getting over-written after being set