add Access-Control-Allow-Origin

fixes #182
remove comment
Merge pull request #183 from jaredly/patch-1

add Access-Control-Allow-Origin