user & me skills + more cors stuff