CORS is a backend decision, not a dev-server trick

Every Laravel + SPA tutorial eventually hits the CORS error, and the usual fix is a dev-server trick:...