Allow cross-origin

Closes #2