SOLVED Cross-Origin Resource Sharing policy: No 'Access-Control-Allow-Origin'

[shawn_a]

sounds like something your browser automatically does when you are using https.
www. is a subdomain , it is not the same site with that regard.

since gs loads urls absolutely, you must access the site with the siteurl in settings.
you probably should be redirecting all www. traffic to the normal domain anyway.