get around the current CORS issue