set "Access-Control-Allow-Origin: *" to allow anyone to access the autocompletion