dropped CORS, added cookies syncing extension module