adding CORS support + tester.request