cors extension is used