Why is CORS needed? I thought the client only talked to the flask webserver...