Allow cross-domain POSTs, too.