Crossdomain ajax have been allowed

* "Access-Control-Allow-Origin: *" header have been added