I apparently needed to do the ACAO/CORS bit in showcheckouts. done.

Signed-off-by: William Rockwood <wrockwood@tadl.org>