cors is a bitch thanks @leematos @akerl