Allow access control origin from *

This just allows the server to be read from any domain. Not sure if this will affect any other functions you may have on the app (PUT, POST, DELETE, etc.).