beefing up cors strategy