add Access-Control-Allow-Origin to response header
Merge pull request #404 from forumbyr/master

add Access-Control-Allow-Origin to response header