added headers to response for cross domain requests