CORS now made to work on X domain. All that was missing was an "Authorization" in the headers supported by the service. https://stackoverflow.com/questions/22050740/