Client cannot sync - CORS error

[grb]

@wishy-washy

I enabled this to mitigate the risk of clickjacking attack

For alternative approaches to mitigating the risk of clickjacking, please refer to the recommendations made in this comment.