Updated Access-Control headers

Updates access control headers in posts controller to allow AJAX
requests.