Rest services do not work with android native app, or in any other browser except Chrome when using the --disable-web-security option on startup.
I understand it not working in browsers but I thought from a native app you dont have the cross-site restrictions?