trying to implement CORS for the pkpass download. failing.