Why not use a node_helper.js to get around the access-allow-origin policy?