add a cors testing ajax code