Update app-server to handle localhost CORs for chrome (http://williamjohnbert.com/2013/06/allow-cors-with-localhost-in-chrome/)