Get rid of Access-Control-Allow-Origin

Review 1175 by @danielmewes
Do not fail to build if npm is missing when using precompiled web assets

Review 1170 by @tryneus
Merge branch 'next' into sam_alt