Revert "Allow cross-domain requests"

Reverts okaybenji/tiles#2 (this did not work...)