add CORS on api, requests come through. next step to display markers