rest api cors
rest api cors allow header content-type
www initial commit, basic rest api access to login