2. Add CORS support
3. separate out the call for the "time" request to /time so that we don't read the file on every request.