detecting browser environment
requiring CORS for browser xhr
matching signature of createHttpClient function
trying to allow unsafe headers
trying to allow unsafe headers
authenticated with CORS