allows CORS
updates serialization