Serve CORSs headers with error responses, including 5xx errors. This makes it easier to see what's going on if something is wrong