v1.0.7 - enabled CORS, added additional no-cache headers