Is it possible to enable cross domain requests in your server?
https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS#Access-Control-Allow-Origin
or at least enable jsonp support?
May be it is already implemented for logged in users...
unfortunately I hadn't found any docs describing this api.