title: 301 response with 'Cross-Origin Request Blocked' despite having correct CORS headers configured
body: <p>I'm accessing nasa pictures with their public api, but i get this error:</p>
  
  <pre><code>Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at
  [nasa api website] (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).
  </code></pre>
  
  <p>But when i inspect their response header, the ‘Access-Control-Allow-Origin’ is present and set to '*', here you can see it:</p>
  
  <p><strong>RESPONSE HEADERS:</strong></p>
  
  <pre><code>Access-Control-Allow-Origin *
  Age 0
  Cache-Control   max-age=0, private, must-revalidate
  Content-Encoding    gzip
  Content-Type    application/json; charset=utf-8
  Date    Sat, 28 Mar 2020 14:37:13 GMT
  Etag    W/"e26hidden..."
  Referrer-Policy strict-origin-when-cross-origin
  Server  openresty
  Strict-Transport-Security   max-age=31536000; includeSubDomains
  Vary    Origin
  Via https/1.1 api-umbrella (ApacheTrafficServer [cMsSf ]), 1.1 vegur
  X-Cache MISS
  X-Content-Type-Options  nosniff
  X-Download-Options  noopen
  X-Frame-Options SAMEORIGIN
  X-Permitted-Cross-Domain-Policies   none
  X-RateLimit-Limit   1000
  X-RateLimit-Remaining   999
  X-Request-Id    00c8c415-37ad-474b-bfbd-8e968d60f37f
  X-Runtime   0.125778
  X-Xss-Protection    1; mode=block
  </code></pre>
  
  <p><strong>REQUEST HEADERS:</strong></p>
  
  <pre><code>Accept  text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  Accept-Encoding gzip, deflate, br
  Accept-Language en-US,en;q=0.5
  Connection  keep-alive
  Host    api.nasa.gov
  If-None-Match   W/"e26chidden.."
  Upgrade-Insecure-Requests   1
  User-Agent  Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:74.0) Gecko/999991 Firefox/74.0
  </code></pre>