Does their API not accept CORS calls?