next attempt to fix CORS problem