More correct way of allowing cross-site XHR in Chrome