added http header to hopefully allow cors requests