Add cors filter, logging level
fixed default.rb