We should enable CORS on SaaS (ONLY FOR API KEYS, NOT COOKIE AUTH) so we can get rid of the cloud-proxy

I will work on this issue. Thank you very much! thankyou