Cross site headers for all HTTP methods