add some logging
use rack/cors for CORS