create headers for cross site request