Chrome Allow Cors Localhost, Don't use a wildcard *.