add CORS and modify json mastermind object