testing for cors, commenting out code