add allow origin on header
add test page using jquery ajax