get CORS working and add mock request