second attempt to fix cors issue