It would be great to be able to configure the CORS header in the response so you can test or fix any issues that come from it.