Actually if we don't allow cross site calls it can end up easily in non auth cors header in the console
make the cors feature allowed between an IP that is not localhost and the server

https://github.com/infinispan/infinispan/blob/f19be009cb76e0094288ac45d8753d0ace55e325/server/rest/src/test/java/org/infinispan/rest/resources/CacheResourceTest.java#L314