add /edit route
add CORS header