abandon cloudfront for now, as it does not work with CORS