added: gem 'rack-cors'
fixed: cross-site requests