Calling the leads.json API. I'm passing the "Access-Control-Allow-Origin": "*", headers and a few others to be extra verbose, but it's still not accepting the request.
I'm using this to generate the Access token:
http://developers.marketo.com/blog/quick-start-guide-for-marketo-rest-api/,
I just realized though, that this token is probably not persistent, and probably needs to be recreated at regular intervals I'm guessing? That's not the issue as non-expired tokens (which work in a REST console, or straight browser), but it's /an/ issue I need to fix.