added http response header to JSON and allow origin