fixed CORS issue but hardcoded the message url in the server controller ...

... TODO: fix this #132 hardcoded values and add post and re factor