build 4 URL params for CORS requests
4got path once again