add step and CORS