add or implement permanent resolution to CORS rejection when querying gdc api without a proxy

[carolinebridge]

currently we need to run a local proxy to the gdc api (the script "proxy" in package.json) to query authenticated gdc resources. for releasing the plugin, we need to conceive a permanent fix for this, permitting authenticated requests to the gdc api. likely will need to collaborate with the gdc to make this happen