I've found recently that CORS doesn't work with it, which kills it for a lot of usecases.