CORS PoC – POST without body