added CORS functionality, now we can json from cross domain!