CORS credentialed-read PoC

running…