support CORS
minor html fixes