websocket handler: cross site allow origin
minimal demo
refactoring web2serial.js