add Access-Control-Allow-Origin
Merge pull request #196 from bstell/master

add Access-Control-Allow-Origin