trying with CORS