update Gemfile
added Access-Control-Allow-Origin:*  to header