Django Cors Policy Javascript