Fix cors headers hash