Added cross origin header
removed composer.lock from ignore, for herokuApp