Added header for CORS support