2 new api : card and cards. Added CORS header. Switched to application/json when not JSONP. fix #72. fix #73