authenticated with CORS
version bump for browser support