Added response header to allow cross-origin requests