The problem is of course CORS. We use cookie authentication, and that doesn't work well with different ports!