testing cors for GETting blog