Allow all the CORS

Who cares about security? ... this makes it easier to debug on different
hosts.