that is the weirdest thing, wasn't supposed to have a password. might have been on filedropper originally awhile back and this didn't take or something. i threw a hbsimu2 to filedropper.
chrome glitches on these. if you run a fresh start of chrome, with the flag --disable-web-security and --user-data-dir="somelocaldirectory", then it'll bypass the CORS restrictions. alternatively just use IE or some old browser that doesn't care about CORS.