Return durationMillis as a long rather than a string
Use CORS to allow requests from JS in other domains