api work

added resources for deleting objects seperately from those that are used to GET all initial data, and POST without authorization. Added crossdomain xhr middleware to properly handle CORS requests.