ensure we mobile tag uploads over CORS (minor)

Change-Id: I757db7c6a51cc7a4b9fc94019027df55ceafaee1