add cross side scripting headers - allowing webui to access server from remote