(incomplete) Try to handle CORS