Turns out JSONP cannot invoke an endpoint unless it is GET based and also does not require XMLHttpRequest, fix consent accordingly