canonical usernames and some bug fixes
cors support