Applied allow-origin header to all urls (/) to fix CORS issue (which only works on success urls).
Merge branch 'master' of github.com:ddsc/ddsc-api