added header to php file for CORS request