Allow configurable cross site access, needed for client side REST access