Allow cross site for status