Cleaning up app.js; making delayedCors a configuration option.