Shuffle steps to make them clearer
Enable CORS
Use absolute URL
Show errors on screen, poor man debugging