Modified access-control-allow-origin to always be '*' (hopefully...)