making progress, but Cors isn't working