CORS Policy doesn't append header if other plugin fails

lets say an endpoint has two policys the cors policy and a custom one if my custom policy comes to the conclusion it needs to fire a doFailure() the cors policy doesn't append any cors headers to the response. which results in my angular code thinking this is an cors error when indeed it should recognize the lets say 401 error my custom policy emits.