OSM.org supports CORS now