Added header ACCESS_CONTROL_ALLOW_ORIGIN to all responses