Jered added cross origin headers to response for requests to the api from javascript