fix CORS hangup by removing custom header attributes