allow remote ajax requests to the webservice