CORS for the API
Fixed the notify message, and added unsubscribe