Turning off explicit domain name in http requests to try to prevent a CORS request