adding before filter for allowing ajax request from cross domains