cors error is due to the actual request failing (502 Bad Gateway). hug of death?