update CORS post wording