custom cors method, ready for field testing!