- make api handle CORS, POST requests, and some rudimentary error
   handling