testing out the cors properties