pretend that zombie allows access to a local cors-enabled server