using cors headers to fetch user info CDB-3608