CORS is not supported on authenticated APIs as it would mean exposing the API key to other users. If you wish to call an authenticated API from a browser, you'll need to proxy the request through an API of your own.
Why do I get a cross-origin resource sharing (CORS) exception when calling an authenticated API from the browser?
