Add allow cross domain header to http response for JS Ajax access