changed access control method to '*' after getting NoMethodError (undefined method access_control_headers)