Allow /http/superheroes.json