API server now accepts any origin