Tried RACK::CORS to allow crossdomain