think it is time... django-cors-headers is a big boy now