diff --git a/main.go b/main.go
index 1e1d188..9da4196 100644
--- a/main.go
+++ b/main.go
@@ -30,7 +30,6 @@ func Serve(w http.ResponseWriter, r *http.Request) {
   <head>
     <title>` + title + `</title>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
-    <meta name="robots" content="noindex, nofollow">
     <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css" integrity="sha384-HSMxcRTRxnN+Bdg0JdbxYKrThecOKuH5zCYotlSAcp1+c8xmyTe9GYg1l9a69psu" crossorigin="anonymous">
     <style>.table > tbody > tr > th, .table > tbody > tr > td { vertical-align: middle; }
 td.danger { text-align: center; }
@@ -197,8 +196,6 @@ func ServeJSONStudent(w http.ResponseWriter, r *http.Request) {
 	log.Printf("Handling %s request from %s: %s [%s]\n", r.Method, r.RemoteAddr, r.URL.Path, r.UserAgent())
 
 	w.Header().Set("Content-Type", "application/json")
-	w.Header().Set("Access-Control-Allow-Origin", "*")
-	w.Header().Set("Access-Control-Allow-Methods", "GET, OPTIONS")
 
 	login := strings.TrimSuffix(strings.TrimPrefix(r.URL.Path, "/"), ".json")
 
