Allow all access origins (for testing)