get post cors working sorta