Add cors header. Need this for a fiddle demo