- CORS Headers
- Return suggestions list
- use param for query