CORS, 404, options

- added basi CORS
- 404, execution doesn’t stop
- OPTIONS handling, should be nicer