Added allow-headers for Ajax requests