trying to fix the CORS exception