@snackdex @NeoPrint3D you were exactly right,

st-auth-mode

wasn't in the headers. I thought that calling

get_all_cors_headers()

returned this as well, but I guess not - thanks so much! I knew it had to be a simple fix that I was just overlooking