removed bio from returned JSON and enable CORS