Adding control access allow origin header to request