Cross-origin resource sharing solved. Uses Salesforce as a proxy when it is not possible to call directly from the browser