fix some TODOs
add bucket.GET>location
add lxml to parse xml & test cors done