adding Access-Control-Allow-Origin to the index:show methods.