Yes it's hosted remotely, but it should allow CORS as it seems to work for others just fine though. I'm not sure why you're not getting access to it. Do you use any browser extensions that mess with the http headers?
Didn't move anything and tried again and now it's all good, don't know why though, weird.
