more resources for CORS