diff -r 30de363937ce -r 16e1473a6a99 server/src/config/cors.php
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/server/src/config/cors.php	Fri Jan 22 17:43:25 2016 +0100
@@ -0,0 +1,21 @@
+<?php
+
+return [
+    /*
+     |--------------------------------------------------------------------------
+     | Laravel CORS
+     |--------------------------------------------------------------------------
+     |
+
+     | allowedOrigins, allowedHeaders and allowedMethods can be set to array('*')
+     | to accept any value, the allowed methods however have to be explicitly listed.
+     |
+     */
+    'supportsCredentials' => false,
+    'allowedOrigins' => ['*'],
+    'allowedHeaders' => ['*'],
+    'allowedMethods' => ['GET',],
+    'exposedHeaders' => [],
+    'maxAge' => 0,
+    'hosts' => [],
+];