[Instructions here](http://www.asp.net/web-api/overview/security/enabling-cross-origin-requests-in-web-api)