cors.js made available