added CORS, added find by id