add delete evaluation endpoint and update CORS
add global error handling