/data single request support and inital frame redirect warnings
readded CORS headers