Resolving issue 18, adding a CORS header to the API