no redirects, cors issues