fixed indent bug
Send A-C-A-O header (allow CORS) ALWAYS. Closes #69