wip. cors circumnavigation