using stripped cors handler