added Access-Control-Allow-Origin header for cross-domain api access
Merge branch 'master' of github.com:thuntergs/DeveloperTest