SJ - added user endpoint, removed cors
removed public files