Added Allow-Cross-Domain Headers and OPTION handler in backend_server
Fixed response reader in script.js