From the title I expected a simple explanation how CORS works...my fault..