added HTTP request header in /public/javascripts/prototype.js to allow all origins to make requests