attempt to fix CORS problem