Add access control header to allow cross domain posts