corrected country names, added Access-Control-Allow-Origin to response header
added options
added options
added Access-Control-Allow-Headers
added Access-Control-Allow-Headers