CORS as show stopper: Why does BigIP not send "Access-Control-Allow-Origin" headers?

Hi all,   I would like to access the iControl API from my local PC (whichis in a other domain as my BigIPs). Testing stuff with Postman is fine, but to get a nice quick view of things, a small HTM...