use json, proxy will support cors