Allow cross-domain AJAX calls.