add a few things

1 access-allow-origin
2 error code enhancement