always use cors and fix mime type support
bump
v0.1.2