CORS is just a verification that the cross domain request is to a trusted domain. Your own domain is assumed to be trusted, by default