Bug fix: allow origin