still working on ajax. the error i am getting still is access control allow orgin