create app controller for global ctrl functions; try to resolve CORS but dont