try new cors implementation