phoenix requires the Origin header to be set to the actual address, so "http://localhost:xxxx" will not work.