first step for disallowedOriginException