added all origin access for public api via JS