admin - more work on CORS issue