use cors for assignments