Due to `Access-Control-Allow-Origin`, `clicks.js` can't be used from other domain. So we need to set `Access-Control-Allow-Origin` to `*` In the future `Access-Control-Allow-Origin` might be change to restrict domains