added response headers for Cross-Origin issues