Tile: set header to enable CORS