Added access-control-allow-origin:* header to all specialist API responses