Get rid of Access-Control-Allow-Origin

Review 1175 by @danielmewes