Allow cross-domain AJAX access to controller actions.