works better when tested
Merge pull request #538 from davidascher/cors-for-testing2

works better when tested