Added Access-Control-Allow-Origin to the response header for mock responding

Signed-off-by: Daniel Koo <danieljamin.koo@gmail.com>