Allow other sites/apps to access the API.