Allow cross origin for redirect script