title: IBM Weather REST API 401 Keep getting CORS issues when access
body: <p>I am getting a <code>40</code>1 and some cross domain issues when trying to access IBM Weather REST API from either client (browser) or server.</p>
  
  <p>If I generate a URL and try and access it directly from a browser (eg paste it in it works fine and the JSON weather report is returned).</p>
  
  <p>When I try and run the Javascript HTTP request from either the browser or server it seems like it's only allowed to run from an ibm.com domain. </p>
  
  <p><code>Failed to load https://twcservice.au-syd.mybluemix.net/api/weather/v1/geocode/-33.00/151.00/forecast/daily/7day.json?units=m&amp;language=en-US: The 'Access-Control-Allow-Origin' header contains multiple values 'https://*.ibm.com, https://*.ibmcloud.com', but only one is allowed. Origin 'http://localhost:3000' is therefore not allowed access.</code></p>
  
  <p>I am using the free service on Bluemix. Is this restricted to only run via a Bluemix server? or are there some options I can pass when I create the service on Bluemix</p>
  
  <p>Note, when I make the request I am using the credentials supplied via the Bluemix console. Again, this works via the browser URL bar, but not via code.</p>
  
  <p>Update/More info: if I hit past the URL above into the browser (with creds) it works as above, then if hit it via the web app in the same session it works.</p>