cors, better attribute existence, check if same client