0.2.7 – allow cors requests, fixes #46