support cors, fix watchify version and brfs compiling app javascript