Enable cross origin requests

So that our UI can call this.