trying to set access control allow header and debug some js