update for CORS requests