CORS progress - still getting errors like
"XMLHttpRequest cannot load http://127.0.0.1:8080/_api/_api/_session. Method DELETE is not allowed by Access-Control-Allow-Methods. "