It enables [CORS](https://en.wikipedia.org/wiki/Cross-Origin_Resource_Sharing) which is [required](http://enable-cors.org/) for allowing browsers to hit the Packages API (for example, via JavaScript), we do in order to get a list of suggestions to show.