Added response headers for CORS