Javascript Access Control Allow Origin Htaccess