We have a Web application using ajax calls to a backend running on different domain (-> CORS needed)