Update RESTmultiply.js

CORS headers