WEBAPP/API: A bit of a messy commit, lots of experimenting in order to get pre-flighted CORS requests working correctly. also, adding tags works!