Go with JSONP instead of CORS