workaround fo no-message from CORS webapi