tidy up, enable cors in flow controller
revise flow execution interface.