added headers for cross domain ajax call.

This enables cross-origin resource sharing
added headers for cross domain ajax call.

This enables cross-origin resource sharing