bump version and add CORS policy headers