Chapter 14. Allowing JavaScript-based access to the API server from additional hosts