Fix west_yout module to accept calls from any origin. To prevent CSRF is better to use Synchronizer Token Pattern.