I see this block of code deleted but I don't see any new code validating that this is an acceptable cross origin request.