Resolved the cross domain scripting issue
Implemented a servlet filter to inject Access-Control-* headers in the response
Changed the Customer resource url back to /Customers from /Customers/Customers