added  base URL infront of process URL, and setup access-control header to allow ajax from other domains