How to use a CORS proxy to avoid “No Access-Control-Allow-Origin header” problems