Add header to allow cross script domain