okay, i said that and then realized it's probably CORS and i'm in no mood to did into NGINX config today