add test for cors methods