Fix Issues #136 - Access-Control-Allow-Origin

Closes #136
"Add domains that we allow (e.g., for /api/sync route)"