Would it be possible to get the API to respond with CORS headers so we can use it in browser-based demos?