CORS support

CORS support with Access-Control-Allow-Origin added