add cors integration test