added http-server to serve CORS headers