new options method
CORS wip