improve run_test.sh & add supertest
fix: test cors