Don't require login on API pages, send Access-Control-Allow-Origin headers, use question params instead of ID to be more consistent with the rest of the site
Minor comment change
Updated tests to reflect changes in controllers
Merge pull request #227 from Dantemss/practice_cross_site

Practice cross site