Allow cross-domain requests

Merging in order to update tiles app on AWS and test