Should now allow cross origin requests (as needed for the web app)