[config] reload api in dev env
[gem] rack-cors
[config] all requests are cors friendly