CORS post draft, some lazy theming