no more nagging about cors