allow calls from constash server
allow cross domain origin access
update dependencies
another go at cross origin