I think the issue was CORS, this made it inaccessible to some clients who cannot overcome this limitation.

Same. Also tried to zap.