url must have a trailing slash else preflight requests fail