Add access-control-allow-origin = *
Add request logging
Pass through status code in response