[Apiman-user] Client App and CORS