add CORS to standards