sending json response with CORS for jsfiddle