now exposing /planned-gpx
added cors support for /planned-gpx