This error happened because my test server had a self-signed SSL certificate. Simply load the test site once and accept the risk when warned. This will make the CORS call proceed normally.