Moved Ajax-Calls to Server-Side (app.js) - This way I avoid the need of tvheadend sending CORS header.