I have an API hosted on one domain that has CORS enabled with the following headers:Access-Control-Allo