migrate to http-mock, add permissions to test setup, install CORS package for mock api server for tests