fixing Access-Control-Allow-Origin by enabling jQuery CORS