Requests are sent directly from the browser. CORS must be enabled on the pool API.