hopefully CORS works now that I changed the headers on the app