Allow cross-origin access to catalog