A brand new web console for Orchestrator 2019

Dev Console is showing:

Access to XMLHttpRequest at 'http://xxxxxxxx:8082/api/folders' from origin 'http://yyyyyy.testdomain.com:8082' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

But i DO have this entry in the API web.config

<add allowCredentials="true" maxAge="7200" origin="http://yyyyyy.testdomain.com:8082">
<allowMethods>
<add method="GET"/>
<add method="PUT"/>
<add method="POST"/>
<add method="PATCH"/>
<add method="DELETE"/>
</allowMethods>
<allowHeaders allowAllRequestedHeaders="true"/>
</add>