testing ajax request -> request data from app hosted on google app engine.

whitelisting the source to bypass cross domain request.