Adds rough cut of CORS support. Updats add spec to allow email address.