engine/views:

Allow cross domain ajax from a few additional views.