fixed loading icon; added cors settings from cross-domain api requests; limited menu to left side