Access-Control-Allow-Origin

enable calls from any server