bypass for CORS restrictions during early app development