2nd iteration on CORS-related issue + analysis + rationale