test without cors?