Access-Control-Allow-Origin' header is missing on mybinder.org

[betatim]

I posted some more in https://github.com/jupyterhub/mybinder.org-deploy/issues/1344