added full url to menu endpoint
added request header Access-Control-Allow-Origin to menu endpoint