This is all a bit yuk because we have an error that indicates the problem is not being HTTP while the problem with files is actually that they are always seen to be from another origin. Not sure how to resolve, but I am pretty sure that you can have a CORS request via HTTP - right?