allow cross domain AJAX requests for the stats URL
see http://stackoverflow.com/questions/19821753/jquery-xml-error-no-access-control-allow-origin-header-is-present-on-the-req for more info
Merge pull request #335 from magfest/make_public_ajax

allow cross domain AJAX requests for the stats URL