Drop the @localonly restriction on endpoints called by JS
By restricting this endpoints to only the machine running pagure we are
in fact blocking them when queried over javascript.
Which is a pity since these two endpoints are meant to be queried via
javascript.
So let's just lift the restriction
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>