added CORS and created a test page