trigger failure() if CORS not supported