update everything

add cors support