Added CORS to allow yasso to make AJAX request