promisifying notifications
allowed x ft session though cors