added cors attribute