Changes to server.js for allowing foreign calls: Access Control Allow Origin