The 403 generally occurs when the CORS url is not configured correctly.

You can configure the CORS URL for your APP Key using your developer account here:

Please see below a screenshot of CORS configuration to be able to run on and localhost. Note that CORS is configured by default to run on all sub-domains.