+ Add support to REST API to allow cross-site API calls from trusted domains.