Revers-engineered the api. Now dealing with Cross Domain Requests