s3 on the client wit CORS