Allow Access-Control-Origin headers to be sent to this service.
Allow origin from web.config now.  No need to code it.