added headers for cross domain ajax call.

This enables cross-origin resource sharing