Application: don't display 404; allow origin