CORS pour request server (localhost only)