plantimals on Nostr: is this above and beyond setting CORS permissions correctly?is this above and beyond setting CORS permissions correctly?