And NetSuite would not let me set a CORS header, so I just ran a proxy locally that added the header