Send Access-Control-Allow-Origin header to allow browsers to acess the API across domains