Cross origin

Added the headers to allow cross origin. 

Tested locally with the central server.