allow all domains
improve server middleware
improve server middleware
use cors module
remvoe that route reference
add cors to heroku