Add Access-Control-Allow-Origin 

Add Access-Control-Allow-Origin to response headers for cross site access to REST API