Add hopeful CORS-friendliness