As my setup for the CDEV and DBAV are using 2 different web servers - One is a pure Web APi App and the other is a pure web client, CORS will come into effect as the web client is now of a different origin. This video explains about CORS and how to overcome it in the server-side.