add types and change back to real api address
remove because CORS works on api now