preparing cors requests