no easy way around CORS