Feature/cors

migrated to flask
enabled cross domain requests on *