Add cross-origin support. closes #2