resolve several issues with extending session and cors access across multiple runtimes in a non-browser / nodejs environment