Access headers

I've added Access Headers methods and filters in the Application Control because we otherwise can't call the JSON requests through AJAX because of Cross-Site Scripting blocks. This code fixes that, and will allow all of our controllers to have the correct JSON headers.