extending the CORS support