Poking around to see what we can find to set proper headers for cross-domain requests