Added header attribute allow-access-from-identity to header  Cross-Domain-Policy.