Added allow-origin header, updated HyperApp UI