Update application.js

Added Authorization field in the res 'Access-Control-Allow-Headers' Headers to allow cross site ajax calls