Attempts to make API request but getting no access control allow origin header