Fixes package.json && crossroads state && CORS allow all