include ggbweb in the allow origin header to allow cross domain access