Update SearchController.php

Added HTTP headers to permit cross-domain AJAX JSON requests