I googled this and i found that you need to add a directive to your apache too

http://enable-cors.org/server_apache.html

you can also try this
...