Is there a reason why this isn't using CORS?