cors stops the browser from reading the response but the request still gets processed by the server