0.4.1, cleaning up cors