Run with web security disabled to avoid CORS issues