updated to use '/' only since CORS is supported