"Access-Control-Allow-Origin" of Response is now defaulted by Requests "Origin" to support CORS