Allow cross-domain access to public API

As promised :)