fixing unittests to do cors posts right