This is needed to allow javascript requests. see [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS)