delete CORS issue

[lybo]

I run a different server for the UI and I use deployd as a API. I don't have any issue apart from the delete end-point which complains about CORS.
ui server port: 3000
deployd server port: 2403

            dpd.fileupload.del(id, function(result, err) {
                if (err) alert(err);
                console.log(result, err);
            });

XMLHttpRequest cannot load http://localhost:2403/fileupload/5a008e9b770a6b62. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:3000' is therefore not allowed access.

Any idea how to resolve it?