better CORS
jshint all ze things
params support