Added cross-origin policy so that the api can be used from clientside JavaScript