This works properly now

But it did work okay served by mongoose to Safari but not to Safari
from Apache via the web

Some subtle timing horror story I reckon :D