placeholders for cors and controller specs so I don't forget to write them