added headers for allowing cross origin communication