added a django middleware to handle cross domain requests in development
working read only REST API in the app