Access-Control-Allow-Origin: * added to service can be used via HTML5/JS webapps