Add cors, from here: http://stackoverflow.com/a/21622564/878969