CORS added:
xml request pending