Certain Android versions have a buggy CORS implementation