Fixed CORS, added basic auth