try a different method for CORS