drop CORS contrib module, use our own, change data str, fixes #93