Tomcat --> reverse_proxy Caddy. http=ok, https=login form missing

Origin does not correspond to request

Is Tomcat configured to accept requests from the domain Caddy is managing? This seems like a cross-site request forgery protection.