Looks like there is no CORS support: an OPTIONS calls result in a 403 Forbidden, and 'Origin' headers don’t get us 'Access-Control-Allow-Origin' response heade

Looks like there is no CORS support: an OPTIONS calls result in a 403 Forbidden, and 'Origin' headers don’t get us 'Access-Control-Allow-Origin' response headers. Which is a shame because a Web-only client would have been fun - and easy as the API is wide open and doesn’t require registration.