WARNING:
Access-Control-Allow-Origin does NOT work on IE (event IE9!)