adds a responseheader that allows facebook