establishing that usegalaxy does not have CORS enabled for cross-origin REST API calls