missing close function
for CORS