Send headers for access control allow origin so WP can do AJAX requests.