added access control decorator for cross-origin AJAX requests, added FFTF leaderboard hooks to log complete calls (optional and wont affect anything if not passed in)