Switch to fetching from MyAnimeList and fallback to mal-api.com

Also add CORS header with few spacing fixes