Allow any origin for accessing this REST call