you are trying to perform XMLHttpRequest(AJAX)
to another domain.
This is restricted due to security reasons.
for more details see: http://en.wikipedia.org/wiki/Cross-origin_resource_sharing
you are missing semicolon on line:
request.setRequestHeader("Access-Control-Allow-Origin: ", "*")