Allow cross-domain requests too