update web api

add cors support
clean up extra binary files that shouldn’t have been committed