adding localhost:8080 to access-control-allow-origin header