api implemented, currently not working as backend has no cors support