added access control allow origin to application_controller.rb