Jered added cross origin allowance to the API controller