Enable CORS for prototype.js and get rid of the message "Refused to get unsafe header X-JSON"