Hmm, seems like case of CROS. Have you whitelist the url in your config setup?
I learned this the hard way