More CORS!

Allow the NEXT, PAUSE, PREVIOUS methods for ajax calls.