Cross origin requests are allowed