Allow cross-domain requests for upload server