post data

have some issues in CORS