removed CORS stuff, fixed spelling