CORS attempt n
limiting the cors resource to programs