CORS is no needed.