Accessing secure endpoint from WKWebView loaded from local files

So we are in development of an iPhone application (iOS 9+, not 8), where we are using WKWebView and local files to start the thing up. To get data into the app we are planning to use a secure service that will also handle authentication, and were thinking that CORS was the way to do this.

Loading files from the file system, however, sets the origin in the HTTP request to null, which is not allowed when we also want to send cookies (for authentication).

So my question(s):

• Can we set an origin in WKWebView to overwrite the null with something like https://acme.server.net?
• What are other people (you) doing?
• Should we consider doing something else other than CORS? (JSONP is not an option).

from Accessing secure endpoint from WKWebView loaded from local files