tries POST in form to solve CORS issue