Update index.js

Added Access-Control-Allow-Headers for swagger cross domain