added CORS methods