Punt the cross-origin restrictions

There's really no point in them. The proxy is stateless.