Just a quick note - if you are trying to test a service that does not use CORS and want to hit via your desktop browser, there is a Chrome extension that let’s you enable CORS for any particular URL you want to test. This is great for people using their desktop browser to prototype hybrid mobile applications. The plugin is called “Allow-Control-Allow-Origin: *” (rolls off the tongue, doesn’t it?) and can be downloaded here.
Once installed, it adds a pretty little icon to your Chrome browser where you can toggle on/off the feature at will. Note that this feature is also available via a command-line switch, but I find a simple button a heck of a lot easier to use.