return correct mime type and cors headers #7