* add cors cuspport
* add api auth support