Added Access-Control-Allow-Origin header to permit stu-nginx.cms.gre.ac.uk server's AJAX requests.
Sealing all commits.