Added "Access-Control-Allow-Headers : *" header in server responses

Added "Access-Control-Allow-Headers : *" header in server responses in order to let different origins invoke APIs with their headers without errors.