Added access-control-allow-origin for all origins in order to use the REST API from other domains.