bumped, added cors headers