added cors_preflight_check and cors_set_access_control_headers before and after filters to api/v1/base_controller to allow cross-domain requests