PHP : Unsafe cross-origin resource sharing (CORS) policy