fix how headers are sent
add CORS to standards