added Cross-Origin-Resource-Sharing headers to htaccess