Temporarily allowing cross-domain requests for development.
Rudimentary REST calls for stuser.