create struct for CORS for optional checks