I cant test any mobile clients, but all the web clients ive tested dont show it.

The JSON file looks correct. but its still missing the "access-control-allow-origin: *" header.