a virtual host example, Access-Control-Allow-Origin set to allow any request from foreign domains