pakai before untuk set CORS header
explode app into classes. added simple specs.