A cheap and easy way to enable CORS requests (cross origin resource sharing) for public APIs; configurability is on the TOD