[PD] deken server CORS headers