leaving out protocol does not ‘fix’ CORS issue on github.