adding some cors and hot reload action
probably won't be using core.async for now