allow more cors methods, and start prepping events