Added Access-Control-Allow-Origin to void send_headers

This allows JS clients on other ports dooing "cross-domain" requests using AJAX XHR.