add CORS, expose assets.js builder