tightened the CORS settings and tested other browsers