added  'Access-Control-Allow-Origin': '*' HTTP header for CORS